smsc95xx: avoid memory leak in smsc95xx_bind
authorAndre Edich <andre.edich@microchip.com>
Mon, 6 Jul 2020 08:39:35 +0000 (10:39 +0200)
committerDavid S. Miller <davem@davemloft.net>
Mon, 6 Jul 2020 19:22:24 +0000 (12:22 -0700)
In a case where the ID_REV register read is failed, the memory for a
private data structure has to be freed before returning error from the
function smsc95xx_bind.

Fixes: bbd9f9ee69242 ("smsc95xx: add wol support for more frame types")
Signed-off-by: Andre Edich <andre.edich@microchip.com>
Signed-off-by: Parthiban Veerasooran <Parthiban.Veerasooran@microchip.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/usb/smsc95xx.c

index eb404bb74e18e1cc2d10bc2d5bd7fa627021922a..bb4ccbda031abb7e261ddf90ef16f8c679d5cfd6 100644 (file)
@@ -1293,7 +1293,8 @@ static int smsc95xx_bind(struct usbnet *dev, struct usb_interface *intf)
        /* detect device revision as different features may be available */
        ret = smsc95xx_read_reg(dev, ID_REV, &val);
        if (ret < 0)
-               return ret;
+               goto free_pdata;
+
        val >>= 16;
        pdata->chip_id = val;
        pdata->mdix_ctrl = get_mdix_status(dev->net);